CERT-In flags multiple vulnerabilities in Android phones

With more than three billion users, Android is the most popular mobile platform in the world. This attracts cyber criminals to prey on naive users. They come up with ingenious ways to sneak into phones by hoodwinking users to install malware-laced apps.

While people are advised to exercise caution while browsing the internet and not to venture too deep into the dark web in search of shady websites, platform owners such as Google are responsible for safeguarding the Android ecosystem. But, due to oversight, sometimes engineers fail to notice loopholes.

In the latest instance, Indian Computer Emergency Response Team (CERT-In) has flagged several vulnerabilities in Android phones.

"These vulnerabilities exist in Android due to flaws in the Framework, System, Google Play system updatees (Remote Key Provisioning subcomponents), Kernel, Arm component, Imagination Technologies components, Unisoc components, and Qualcomm components," reads CERT-In notification.

If the loopholes are not fixed soon, threat actors can exploit them to access sensitive information and even perform Denial-of-Service (DoS) attacks on the targeted phones with Android 12, 12L, Android 13 and Android 14.

Google has acknowledged the issues and has rolled out the update to the Pixel phones for now. Other Android OEMs (Original Equipment Manufacturers) are expected to release the security updates to respective phones in the coming weeks.

"Exploitation for many issues on Android is made more difficult by enhancements in newer versions of the Android platform. We encourage all users to update to the latest version of Android where possible," reads the Android Security bulletin.

In a related development, Google has rolled out new features to Android phones to enhance user experience.

It improves talkback feature, which is created for people with low vision. With the new update, it will get Gemini AI capability and be able to offer detailed audio descriptions of digital images.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.